Privacy Policy

The School, SnowWind Ski School (operating entity: Yukikaze Co., Ltd.; operations manager: Ryokan Ijuin; registered address available on request; privacy contact: [email protected]), handles your personal data in accordance with the Act on the Protection of Personal Information (APPI). This policy covers both our website (www.ykhokkaido.com) and the “雪風 SnowWind” mobile application (Android / iOS, “the App”).

Data we collect

Website

Booking & contact details: name, email, contact info, the course and time slot booked.
Payment details: processed by Stripe; the School does not store your full card number.
Safety & emergency data: emergency contact, and the minimum health information needed for safety.

App

Location and ride recordings — after you actively start recording, the App uses precise location and motion sensors to calculate your track, speed and turns on-device and provide replay. Android recording uses a foreground service with an ongoing notification; on iOS, recording can continue while the screen is locked after you grant permission. Stopping a recording stops location collection for that recording. Guest recordings remain on-device. After sign-in, recordings belonging to that account are automatically synced to its private Supabase account space for backup and cross-device access. Private sync does not publish a recording.
Buddies and live location sharing — location is used and transmitted for these features only when you activate buddy, friend live-location or watch-link sharing. Your location is available to your group, the friends you share with, or people holding your shared link. Keep private sharing links confidential. You can stop sharing in the corresponding feature. Supabase processes this location data.
Photos and the activity feed — you can select photos with the system picker. Capture times of selected ride photos are used to place them in your local replay; this does not automatically upload the photos. If you separately choose to publish an activity, its selected photos, caption, display name and any route or statistics you include are shared according to the publishing settings. Other people can view public posts. Feed photos use publicly accessible media URLs, so do not attach private or sensitive photos to feed posts. Photos are used for the features you choose, not for advertising targeting.
Notifications — when you enable notifications, we associate a device push token and platform with your account to deliver lesson and service notifications through Expo and Apple/Google device notification services. You can disable notifications in device settings. Signing out unregisters that account’s device notification registration.
Microphone / voice — recorded only while you hold the AI assistant’s microphone button. Audio is sent to our server for speech recognition (Cloudflare Workers AI / Whisper); the recognized text is answered by an AI service (DeepSeek). Voice audio is not retained long-term; please avoid speaking sensitive personal data.
Account details — if you choose to sign in: email, display name and avatar via Google Sign-In or email, stored in Supabase.
Learning and reading progress — teaching practice progress can sync to Supabase after sign-in for cross-device use. Journal bookmarks, text size and reading positions are stored on-device.

Special Care-Required Personal Information (Health, etc.)

Medical history, physical or mental health, medication and similar details may constitute Special Care-Required Personal Information under the APPI. The School collects such information only to the minimum extent necessary for safety management, with your separate, explicit consent; this data is access-restricted, is never used for marketing or ad targeting, and is retained for a shorter period.

Purpose of use

To provide and manage bookings, collect payment, and send confirmations / notifications.
To provide App features: ride recording and replay, location sharing and activity interactions you enable, the AI assistant, snow conditions and pre-trip reports, reading and learning progress, and account data sync.
Customer contact and after-sales service.

Third-party processors

Stripe — credit-card payment processing.
Supabase — member accounts and sign-in, private recording and progress sync, location sharing you enable, and activity posts, comments and photos.
Expo, Apple and Google — delivery of device notifications you allow.
Resend — transactional email (booking confirmations etc.).
Cloudflare — hosting, security, speech recognition (Workers AI / Whisper), and Turnstile bot verification (invisible mode). Turnstile data handling is governed by the Cloudflare Privacy Policy and its Turnstile Privacy Addendum.
DeepSeek — text generation for the AI assistant (receives only your typed or transcribed text plus necessary conversation context; never your account data or raw location).
Open-Meteo — weather / snow forecast source (requests carry resort coordinates only, never your personal data or own location).
Some providers (such as Stripe, Supabase, Cloudflare and DeepSeek) may process data outside Japan. Where this constitutes providing personal data to a third party in a foreign country, the School complies with the APPI — where required, providing information about the recipient country’s data-protection system and safeguards, and obtaining your consent.

Cookies

This site may use essential cookies for basic functionality; booking and payment flows are handled by the third parties above on their own domains.

Retention & your rights

You can manage ride recordings in the App and request account and cloud-data deletion through account deletion or our contact address. Uninstalling removes local App data but does not automatically delete previously synced cloud recordings or published content.
The School does not retain data indefinitely; data is deleted or anonymized once the purpose of use has been achieved and there is no legal, accounting, claims, dispute, or safety need to retain it. Health information is retained for a shorter period; incident/dispute records are preserved as required by law.
Under the law, you may request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, or suspension of provision to third parties, regarding your personal data (the School may verify your identity to the extent permitted by law). Please email [email protected]; the School will respond within a reasonable period. For the account/data deletion request process, timeline, and retention exceptions, see the Account & Data Deletion page.

Policy Changes

Page updated: September 8, 2026. If this policy changes materially, the effective date will be announced on this website; if a new purpose exceeds the scope of your original consent, the School will obtain your consent separately.